DataLife Engine is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system other attacks are also possible. DataLife Engine 9.7 is vulnerable other versions may also be affected.

Vendor updates are available. Please see the references for details.

• http://www.securityfocus.com/bid/57603

---

Updated on 2015-03-25